$ rpki-client -vvf repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft File: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft (raw, json) Hash identifier: h90VsTPyZcl70LGsQ94wVp+WIHoiq6QXjz00vEP1KnQ= Subject key identifier: F1:E6:09:4B:7B:61:2A:78:40:53:CF:69:4E:72:DE:E2:D6:CD:DA:C7 Authority key identifier: 3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B Certificate issuer: /CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Certificate serial: 3995427838E1BF27877B745AFF3D75B542E271CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft Manifest number: 0371 Signing time: Sat 18 Oct 2025 15:41:19 +0000 Manifest this update: Sat 18 Oct 2025 15:36:19 +0000 Manifest next update: Tue 21 Oct 2025 21:40:19 +0000 Files and hashes: 1: 3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl (hash: ZZ7VUEFMsDfh5kMYcRM3ct1QnYfCycxID4N131OjixE=) 2: 3130332e3137312e31382e302f32342d3234203d3e20313336303532.roa (hash: 5h5J8xW62JxvWusBPqO7t7BtPqu0f0FKKCSn5YoWmpk=) 3: 3130332e3137312e31392e302f32342d3234203d3e20313338363038.roa (hash: DS4rfXsOZAd6zyO+PWFbBzflwksjO/ECzvelckHR5dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:95:42:78:38:e1:bf:27:87:7b:74:5a:ff:3d:75:b5:42:e2:71:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B Validity Not Before: Oct 18 15:36:19 2025 GMT Not After : Oct 21 21:40:19 2025 GMT Subject: CN=F1E6094B7B612A784053CF694E72DEE2D6CDDAC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:40:5e:26:4a:b7:04:6b:51:0d:54:e9:b7: a6:94:9a:4a:35:3b:83:94:db:18:3a:05:3e:27:c4: a2:11:a9:d1:c3:3a:bd:58:0d:96:01:a5:11:ac:61: 66:55:ca:a7:19:20:af:34:eb:b9:80:52:11:ce:68: cd:f1:b8:ad:2c:ab:0e:2d:52:9b:c3:15:6b:2e:cc: e0:92:44:b6:c7:30:b3:09:98:f6:6a:66:91:a2:dd: 9a:4c:7c:64:b0:b1:41:d3:f0:d1:1b:f2:df:3f:97: b0:19:ba:be:1f:7b:dd:1e:49:f8:c3:25:85:90:f3: 5b:4a:5c:4a:ee:50:df:1c:59:62:80:cd:de:5a:15: 78:6e:97:eb:34:5d:b4:58:0c:ef:68:0a:50:1c:c0: 34:0e:31:44:4b:ed:80:b1:89:de:9d:58:00:77:b3: 8b:61:8e:2b:86:3a:af:9e:43:35:65:67:dc:6f:5a: d3:7c:ed:33:34:a8:7c:f5:60:b4:a3:d5:df:98:63: 66:e5:fd:bb:01:08:86:82:91:65:00:41:85:90:91: 90:4e:27:16:cd:53:fb:9b:f2:bf:f9:01:08:7e:9d: a2:ff:67:8c:bd:1c:72:bf:70:53:b2:d1:03:96:21: e9:e1:98:31:89:a5:82:0e:86:39:67:e1:20:e2:22: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E6:09:4B:7B:61:2A:78:40:53:CF:69:4E:72:DE:E2:D6:CD:DA:C7 X509v3 Authority Key Identifier: keyid:3C:91:48:EF:27:AF:5E:D3:48:13:42:F5:DE:F2:5A:26:A0:CB:9F:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a8f69f7-9332-4cd4-b3e5-cc6c4772cf73/0/3C9148EF27AF5ED3481342F5DEF25A26A0CB9F8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c3:fe:bb:14:61:a4:bc:1f:06:cc:f1:31:9a:a4:fb:4e:7c: c8:87:fa:07:ea:1b:97:2a:33:f5:e3:83:0f:3e:41:7a:c6:5f: dd:94:50:bb:e9:8c:99:53:bb:1a:0d:db:2f:40:90:0c:b1:c0: 75:27:1c:9f:9f:b7:89:ae:b5:85:a5:ba:13:de:e2:e0:8b:3c: a2:2a:43:01:66:25:3d:d7:c0:ad:42:8b:9c:19:50:1b:3e:9d: 55:ae:f3:2c:8f:8e:21:9d:6b:ab:58:95:3c:96:dd:1f:8c:2e: 04:d6:5b:d2:f9:82:87:f8:c7:0e:bf:39:ea:f0:9f:a7:1e:61: 00:58:a3:3e:87:1d:94:71:ae:68:d0:95:9c:c3:ab:1b:88:41: a5:fd:97:68:7f:4b:4b:87:81:b3:30:42:11:a2:b4:93:3c:02: 82:2d:cd:5d:6e:01:d2:92:0b:bf:21:6e:8a:cb:8c:ce:6c:f8: 3f:1f:52:d2:a1:15:c1:29:7a:ab:54:be:c8:23:6b:21:b9:11: 8d:d8:c2:71:76:2d:fe:7c:12:9e:65:d1:d4:1c:1b:9d:55:22: e8:dc:3c:87:1e:e0:2b:07:f6:a3:4b:23:ff:7d:0c:c4:cd:10: 0e:1b:0e:28:67:b4:3b:85:98:97:e0:16:6b:2c:99:f3:4e:06: 1f:fb:43:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZVCeDjhvyeHe3Ra/z11tULicc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZB MENCOUY4QjAeFw0yNTEwMTgxNTM2MTlaFw0yNTEwMjEyMTQwMTlaMDMxMTAvBgNV BAMTKEYxRTYwOTRCN0I2MTJBNzg0MDUzQ0Y2OTRFNzJERUUyRDZDRERBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+0BeJkq3BGtRDVTpt6aUmko1 O4OU2xg6BT4nxKIRqdHDOr1YDZYBpRGsYWZVyqcZIK8067mAUhHOaM3xuK0sqw4t UpvDFWsuzOCSRLbHMLMJmPZqZpGi3ZpMfGSwsUHT8NEb8t8/l7AZur4fe90eSfjD JYWQ81tKXEruUN8cWWKAzd5aFXhul+s0XbRYDO9oClAcwDQOMURL7YCxid6dWAB3 s4thjiuGOq+eQzVlZ9xvWtN87TM0qHz1YLSj1d+YY2bl/bsBCIaCkWUAQYWQkZBO JxbNU/ub8r/5AQh+naL/Z4y9HHK/cFOy0QOWIenhmDGJpYIOhjln4SDiIpPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8eYJS3thKnhAU89pTnLe4tbN2scwHwYDVR0j BBgwFoAUPJFI7yevXtNIE0L13vJaJqDLn4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YThmNjlmNy05MzMyLTRjZDQtYjNlNS1jYzZjNDc3MmNmNzMvMC8zQzkxNDhFRjI3 QUY1RUQzNDgxMzQyRjVERUYyNUEyNkEwQ0I5RjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVBMjZBMENC OUY4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWE4ZjY5ZjctOTMzMi00Y2Q0LWIz ZTUtY2M2YzQ3NzJjZjczLzAvM0M5MTQ4RUYyN0FGNUVEMzQ4MTM0MkY1REVGMjVB MjZBMENCOUY4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfD/rsUYaS8HwbM8TGapPtOfMiH+gfqG5cq M/Xjgw8+QXrGX92UULvpjJlTuxoN2y9AkAyxwHUnHJ+ft4mutYWluhPe4uCLPKIq QwFmJT3XwK1Ci5wZUBs+nVWu8yyPjiGda6tYlTyW3R+MLgTWW9L5gof4xw6/Oerw n6ceYQBYoz6HHZRxrmjQlZzDqxuIQaX9l2h/S0uHgbMwQhGitJM8AoItzV1uAdKS C78hborLjM5s+D8fUtKhFcEpeqtUvsgjayG5EY3YwnF2Lf58Ep5l0dQcG51VIujc PIce4CsH9qNLI/99DMTNEA4bDihntDuFmJfgFmssmfNOBh/7Qxc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:24 2025 by rpki-client